Security risk management building an information security risk management program from the ground up / Evan Wheeler. - Wheeler, Evan (Syngress, 2011)